System crash with strongswan/IPsec connection in transport mode if remote party is unreachable

This document (7015087) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 11 SP3

Situation

A SLE 11 SP3 strongswan client with IPsec in transport mode will crash with a null pointer dereference if the remote host is unreachable (i.e. shutdown).

Resolution

In case this issue is experienced please contact SUSE Technical Service for a program temporary fix.

Additional Information

Kernel trace:

[  603.152451] BUG: unable to handle kernel NULL pointer dereference at 000000000000003c
[  603.160316] IP: [<ffffffff812545ec>] _atomic_dec_and_lock+0xc/0x80
[  603.166525] PGD 1260ce067 PUD 1249f4067 PMD 0
[  603.171021] Oops: 0000 [#1] SMP
[  603.174287] CPU 3
[  603.176134] Modules linked in: xfrm_user xfrm4_tunnel tunnel4 ipcomp xfrm_ipcomp esp4 ah4 af_key microcode snd_pcm_oss snd_mixer_oss snd_seq snd_seq_device fuse ext2 loop usbhid hid snd_hda_codec_hdmi snd_hda_codec_realtek ipv6_lib firewire_ohci hp_wmi f
irewire_core sparse_keymap i2c_i801 rfkill crc_itu_t rtc_cmos pcspkr snd_hda_intel snd_hda_codec serio_raw i2c_core iTCO_wdt sg iTCO_vendor_support snd_hwdep snd_pcm e1000e snd_timer wmi snd mei container soundcore button snd_page_alloc ext3 jbd mbcache dm_
mirror dm_region_hash dm_log linear xhci_hcd ehci_hcd sd_mod crc_t10dif usbcore processor thermal_sys usb_common hwmon isci(X) libsas scsi_transport_sas scsi_dh_emc scsi_dh_rdac scsi_dh_alua scsi_dh_hp_sw scsi_dh dm_snapshot dm_mod ata_generic ahci libahci
libata scsi_mod
[  603.246137] Supported: Yes, External
[  603.249713]
[  603.251208] Pid: 550, comm: kworker/3:2 Tainted: G            X 3.0.101-0.21-default #1 Hewlett-Packard HP Z420 Workstation/1589
[  603.262824] RIP: 0010:[<ffffffff812545ec>]  [<ffffffff812545ec>] _atomic_dec_and_lock+0xc/0x80
[  603.271452] RSP: 0018:ffff880126bedd80  EFLAGS: 00010282
[  603.276764] RAX: ffff880126bedfd8 RBX: 000000000000003c RCX: 0000000000014df0
[  603.283901] RDX: 00000000ffffffe0 RSI: ffffffff81fe1680 RDI: 000000000000003c
[  603.291036] RBP: ffffffff81fe1680 R08: ffff880126bec000 R09: 0000000000000000
[  603.298172] R10: ffff88012fd918a0 R11: 0000000000000000 R12: 0000000000000000
[  603.305307] R13: ffff88012fd8d600 R14: ffff88012fd94c05 R15: ffffffff813b6bf0
[  603.312444] FS:  0000000000000000(0000) GS:ffff88012fd80000(0000) knlGS:0000000000000000
[  603.320544] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[  603.326290] CR2: 000000000000003c CR3: 0000000126526000 CR4: 00000000000407e0
[  603.333428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  603.340563] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  603.347700] Process kworker/3:2 (pid: 550, threadinfo ffff880126bec000, task ffff88012473e4c0)
[  603.356311] Stack:
[  603.358326]  ffff88012473e4c0 0000000000000000 ffff880124637c00 ffffffff813d4fc9
[  603.365794]  ffff880124637c00 ffffffff814214b5 0000000000000286 ffff880124637c00
[  603.373262]  ffffffff81a73600 ffffffff813ab5c2 ffff880125236610 ffff880125236730
[  603.380728] Call Trace:
[  603.383184]  [<ffffffff813d4fc9>] inet_putpeer+0x19/0x60
[  603.388504]  [<ffffffff814214b5>] xfrm4_dst_destroy+0x35/0xc0
[  603.394257]  [<ffffffff813ab5c2>] dst_destroy+0x22/0x130
[  603.399581]  [<ffffffff81424db5>] xfrm_bundle_flo_delete+0x35/0x50
[  603.405772]  [<ffffffff813b6c85>] flow_cache_gc_task+0x95/0xc0
[  603.411613]  [<ffffffff8107b90c>] process_one_work+0x16c/0x350
[  603.417456]  [<ffffffff8107e53a>] worker_thread+0x17a/0x410
[  603.423039]  [<ffffffff810828a6>] kthread+0x96/0xa0
[  603.427927]  [<ffffffff81469ee4>] kernel_thread_helper+0x4/0x10
[  603.433854] Code: 83 ec 08 be 00 10 00 00 e8 b2 03 00 00 ba 00 10 00 00 3d 00 10 00 00 0f 4f c2 48 83 c4 08 c3 55 48 89 f5 53 48 89 fb 48 83 ec 08 <8b> 17 83 fa 01 74 3d 8d 72 ff 89 d0 f0 0f b1 37 39 c2 89 c1 75
[  603.453834] RIP  [<ffffffff812545ec>] _atomic_dec_and_lock+0xc/0x80
[  603.460118]  RSP <ffff880126bedd80>
[  603.463609] CR2: 000000000000003c

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7015087
  • Creation Date: 20-May-2014
  • Modified Date:04-Mar-2021
    • SUSE Linux Enterprise Server

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback@suse.com

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Join Our Community

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.


SUSE Customer Support Quick Reference Guide SUSE Technical Support Handbook Update Advisories
Support FAQ

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.

Go to Customer Center